Read the docs
TI-2019-15523 Aliases CVE-2019-25470GHSA-jcxq-mj3r-cxrh

eWON Firmware 12.2-13.0 Authentication Bypass via wsdReadForm

Priority HIGH 77CWE-798Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-798.

Summary

eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows attackers with minimal privileges to retrieve sensitive user data by exploiting the wsdReadForm endpoint. Attackers can send POST requests to /wrcgi.bin/wsdReadForm with base64-encoded partial credentials and a crafted wsdList parameter to extract encrypted passwords for all users, which can be decrypted using a hardcoded XOR key.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00443 38th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
eWONeWON12.2 <= 13.0—No fix listedCNA
  • eWON VendoreWON Affected 12.2 <= 13.0 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-25470
  2. 2026-10-03 Alias added: GHSA-jcxq-mj3r-cxrh

References

Exploit 1

Other 1

  • TI-2015-06593 eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status… CVSS 3.0CRITICAL 9.9
  • TI-2015-06595 eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a… CVSS 3.0HIGH 8.5
  • TI-2015-06591 eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session… CVSS 3.0HIGH 8.8
  • TI-2015-06592 Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through… CVSS 3.0HIGH 8.0
  • TI-2015-06594 Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0… CVSS 3.0MEDIUM 6.1
  • TI-2015-06596 eWON devices with firmware through 10.1s0 support unspecified GET requests, which might… CVSS 3.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences